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(57) Abstract 

An online coupon issuing and redemption system and method receives requests for coupons from consumers, presents advertisements 
and issues coupons to consumers electronically. The system presents advertisements before issuing the coupons, such that an issuer may 
be assured its targeted consumer is receiving its advertisements. The coupons are issued on a smart card, thereby eliminating a need for 
paper coupons. The coupons are digitally signed in order to prevent fraud. In order to prevent further fraudulent tampering of coupons, 
the redemption station includes a tamper-protected coprocessor for performing operations on the coupons. TTie system further includes 
capability for the redemption station to link to an issuing station for electronic reimbursements. 
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AUTHENTICATED ELECTRONIC COUPON ISSUING AND REDEMPTION 

The present invention relates to an electronic advertisement and 
coupon issuance and redemption. 

5 

Retailers and manufacturers often sponsor incentive programs for 
persuading consumers to buy their products. These incentives include 
discount coupons distributed to consumers whereby a consumer may redeem 
the coupon when purchasing an associated item. Such coupons are usually 
10 distributed in paper forms. 

The problems associated with paper coupons today are that the 
retailer and manufacturers who advertise cannot assure that consumers who 
use paper coupons have actually read the product advertisements which 
15 accompany the coupons. The advertisers do not have a way of knowing who 
is viewing their advertisements and cannot dynamically adjust the 
advertisement to fit the viewer’s tastes and interests. 

in addition, many cases of fraud related to paper coupons are 
20 occurring today. For example, paper coupons are easily counterfeited. 

Some consumers commit fraud by redeeming coupons for merchandise they have 
not purchased, some retailers also commit fraud by redeeming coupons for 
merchandise which consumers have not purchased. 

25 Manufacturers must rely on the cashiers and computer systems at 

retail establishments to assure that consumers who redeem coupons have 
actually bought the targeted product and that the coupons redeemed were 
not expired at the time of redemption. Retailers often rely on their 
cashiers to enforce coupon redemption rules. Other retailers rely on 
30 computerized systems to compare coupon bar codes to the consumer's 
purchases. 

U.S. patent number 4B80964 by Donahue describes paper coupons with 
bar codes printed on them, and thus does not solve the deficiencies of 
35 paper coupons described above. U.S. patent number 5710866 by Christensen 
et al. describes electronically generated coupons but requires a database 
of customers and spent coupons which is costly to maintain. It also 
requires online connection to the database at redemption time to determine 
if the coupon is valid. 

40 

In accordance with the present invention, there is now provided a coupon 
issuing system for electronically presenting advertisements and generating 
coupons, said system comprising: at least one issuing station for 
generating and transmitting electronic advertisements and electronic 
45 coupons according to predetermined criteria: at least one customer station 
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to transmit from a user to the issuing station a request for an electronic 
coupon, for receiving electronic advertisements and electronic coupons 
from the issuing station, and for presenting the advertisement to the user 
for interaction with the user; at least one smart card for holding 
information including said electronic coupons; at least one smart card 
reader/writer for communicating information held in said at least one 
smart card to said at least one customer station; and at least one 
software program to monitor a status of the interaction of the user with 
the advertisement; whereby when said at least one software program detects 
a predefined status, said at least one software program transfers said 
electronic coupons to said smart card via said smart card reader/writer. 


Viewing the present invention from another aspect, there is now provided a 
system for redeeming electronic coupons comprising: at least one 
redemption station; and at least one smart card reader/writer linked to 
said redemption station; whereby said redemption station selects and 
updates via said at least one smart card reader/writer, coupons stored in 
a smart card, deleting expired coupons and also those matching purchased 
items. 

Viewing the present invention from yet another aspect, there is now 
provided a method for advertising and issuing at least one coupon 
electronically, said method comprising: receiving a request for said 
electronic coupon from a consumer; generating at least one electronic 
advertisement and said electronic coupon; transmitting said electronic 
advertisement and said electronic coupon to a consumer's station for 
presentation to said consumer; monitoring said consumer's interaction with 
said advertisement; and transferring said electronic coupon to a smart 

card, if said consumer's interaction with said advertisement meets a 
predefined status. 

In a preferred embodiment of the present invention there is provided an 
online coupon issuing and redemption system. The issuing system includes 
an issuing station. The issuing station is generally comprised of a 
computer located usually at a manufacturer's site. The issuing station 
typically generates advertisements and coupons electronically. The 
issuing system also includes a consumer station, usually a computer and a 
smart card reader/writer generally located at the consumer site. The 
smart card reader/writer may be linked to the consumer computer either 
directly or via a LAN or other network connections. 

The issuing station and consumer station are linked via a 
communications network, when a consumer makes requests via the consumer 
station for coupons, the issuing station transmits the advertisement and 
coupons it generated to the consumer station. The issuing station also 
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has a capability of digitally signing the coupons. Digital signatures 
insure the authenticity of the coupons as well as that of the issuer and 
the issuing station. Also included in the transmission is a program 
having a capability to run on the consumer station. The program is 
responsible for making sure that the consumer absorbs the entire 
advertisement and transferring the coupons to a smart card via the smart 
card reader/writer linked to the consumer station. 

This assures the advertisers that a consumer actually perceives the 
advertisement for a product before receiving discount coupons. 

The redemption system generally comprises a redemption station, 
typically a computer, and a smart card reader/writer linked to the 
redemption computer. The redemption system is typically located at a 
purchasing site, when a consumer is ready to make a purchase, the 
consumer inserts the smart card having electronic coupons stored in it 
into the smart card reader/writer linked to the redemption station. The 
redemption system reads the coupons via the smart card reader/writer and 
matches the purchased items with coupons. The matched coupons are 
extracted from the smart card, so that they may not be used again. At the 
same time, the redemption system deletes any expired coupons stored in the 
smart card. 

The redemption system also may include a tamper-protected secure 
coprocessor, xn order to protect a manufacturer from fraudulent merchants 
and customers, operations which assess the validity of coupons, operations 
which update, collect, store, or delete coupons may take place inside a 
tamper-protected hardware boundary. The hardware boundary is part of 
typical tamper-protected secure coprocessors and 3 mart cards. 

This provides a tamper-protected access to the coupons stored in the 
smart cards. 


Embodiments of the present invention may include a database of 
coupons stored in the issuing station. The database may include a list of 
coupons issued or already spent, when a consumer is ready to redeem the 
coupons, the redemption station links to the database and validates the 
coupons stored in the consumer's smart card by comparing the smart card 
coupons with a list of coupons in the database. Only the valid coupons 
matching the list in the database may be actually redeemed. 


In embodiments of the present invention there may be provided a 
communications link between a redemption station and an issuing station. 
Such a link is established when a merchant wants reimbursements from the 
manufacturer for the coupons the merchant redeemed to the consumers. 
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Typically the redemption computer 3ends electronic coupons which have been 
digitally signed to the issuing computer. The issuing computer validates 
the electronic signatures on the coupon. If the signatures are valid, the 
manufacturer reimburses the merchants for the valid coupons. This 
5 provides a mechanism for the manufacturer to electronically reimburse the 
merchants. 

Preferred embodiments of the present invention will now be described by 
way of example only, with reference to the accompanying drawings, in 
10 which: 

Figure 1 is an exemplary diagram illustrating a physical 
architecture of an issuing system embodying the present invention; 

15 Figure 2 is a flow diagram illustrating one possible logic flow of 

issuing software running on the issuing computer embodying the present 
invention; 

Figure 3 is a flow diagram illustrating one possible logic flow of 
20 advertisement viewing software running on the viewing computer embodying 
the present invention; 

Figure 4 is a flow diagram illustrating one possible logic flow for 
interaction between advertisement viewing software and issuing software; 

25 

Figure 5 is an illustrative example showing a physical layout of a 
redemption system architecture embodying the present invention; 

Figures 6 and 7 are a flow diagram illustrating one possible logic 
30 flow in the redemption system during a typical point of sale; 

Figure 8 is a flow diagram illustrating a possible logic flow in a 
typical daily coupon close-out; 

35 Figure 9 is an illustrative example showing a physical layout of a 

software-based redemption system embodying the present invention. 

Figure 1 is an exemplary diagram illustrating a physical 
architecture of an issuing system embodying the present invention. An 
40 authenticated electronic coupon issuing system 3hown in Figure 1 includes 
an issuing station, typically a computer 110 running issuing software 115; 
a viewing station, typically an advertisement viewing computer 120 running 
advertisement viewing software 123 which sends requests for coupons 125 to 
an issuing computer 110; an advertisement viewing computer 120 running 
advertisement applet software 130; an electronic advertisement 140; an 


45 
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electronic coupon which is digitally signed 150; a dispensing smart card 
reader/writer 160; a customer's smart card 170 holding an electronic 
coupon 150. A typical smart card may be a chip card having an integrated 
circuit that is resistant to physical tampering. An issuing station 
typically comprises a computer at a manufacturer or clearing house site. 
Likewise, a viewing station typically comprises of a computer at a 
customer site. A customer is typically a consumer who receives coupons 
electronically and makes purchases using the coupons. 

A dispensing smart card reader/writer 150 is attached to an 
advertisement viewing computer 120 and is accessible by advertisement 
applet software 130. 

Issuing software 115, advertisement viewing software 123, and 
advertisement applet software 130 are typically purchased from software 
vendors. An electronic advertisement 140 is supplied by an advertisement 
content vendor. A customer's smart card 170 may be purchased from a smart 
card vendor. Likewise, a customer's smart card reader/writer 160 may be 
supplied by a smart card reader/writer vendor. An issuing computer 110 
and an advertisement viewing computer 120 may be obtained from computer 
hardware vendors. An electronic coupon 150 is generated by issuing 
software 115. a request for coupons 125 is generated by advertisement 
viewing software 123. 

Figure 2 is a flow diagram illustrating one possible logic flow of 
issuing software running on the issuing computer of the present invention. 
Initially in step 210, the issuing software awaits a request from an 
advertisement viewing computer. A request includes information about the 
customer, such as his interests (e.g., propensity for playing tennis), and 
demographics (e.g., a senior citizen), m step 220, the issuing software 
retrieves a customer's interest profile and demographics from a request. 

In step 230, the issuing software selects an electronic advertisement 
which matches a customer's interest profile and demographics. For 
example, if a customer is a senior citizen, the issuing software selects 
an electronic advertisement targeted at senior citizens, not one targeted 
at teenagers. In step 240, the issuing software generates an electronic 
coupon which is digitally signed. 

Digital signatures are generally created by piping a sender's 
private key and the contents of the message into an algorithm. The output 
of the algorithm is the digital signature. The recipient can verify the 
digital signature by using the sender's public key and the message. The 
digital signature is secure because it would be virtually impossible for 
another computer to produce the identical digital signature. Each user 
has the responsibility of protecting the private key. 
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In step 250/ the issuing software transmits an electronic 
advertisement, advertisement applet software, and an electronic coupon to 
an advertisement viewing computer. The issuing software then waits for 
another request from the advertisement viewing software. 

Figure 3 is a flow diagram illustrating one possible logic flow of 
advertisement viewing software running on the viewing computer of the 
present invention. In step 310, the advertisement viewing software awaits 
a request for a coupon from a customer. In step 315, the viewing software 
obtains information about a customer, such as his interests and 
demographics. The viewing software may obtain the information directly 
from a customer through a dialogue, or from a customer's smart card, or 
from a file on the viewing computer. In step 320, the viewing software 
includes a customer's interest profile and demographics with a request for 
a coupon. in step 325, the viewing software transmits a request for a 
coupon to an issuing computer. In step 330, the viewing software awaits a 
response from an issuing computer. if there is no response, the viewing 
software times out, in step 335, displays an error message and, in step 
310, awaits for another request from a customer. If there is a response 
from an issuing computer, the viewing software receives advertisement 
applet software, an electronic advertisement, and an electronic coupon as 
shown in step 340. m step 350, the viewing software then runs 
advertisement applet software. The software determines, in step 360, if 
the customer viewed an entire advertisement. In step 370, if the applet 
software times out or if a customer exited the software prematurely, the 
viewing software terminates the session and returns to wait for another 
request from a customer in step 310. In step 380, if the applet 
determines that a customer did view the entire advertisement, the applet 
software transmits an electronic coupon which is digitally signed to a 
customer's smart card via a dispensing smart card reader/writer. 

An example of viewing software may include a World Wide web (Web) 
page having a uniform resource locator (URL) address which a consumer may 
access via a web browser. The URL address would be located in the web 
server linked to an issuing station. The web page may have a number of 
parameter fields as input fields which the consumer is required to fill. 
The Web page with the parameters may then be transmitted to the web server 
at the issuing station. The web server together with issuing software may 
then use the parameters to generate electronic advertisements and coupons, 
transmitting them with an applet software to the viewing software. The 
viewing software typically launches the applet software. The launched 
applet software displays the advertisements on the consumer station, 
controlling the station's interaction with the consumer. The applet 
software may also be responsible for transferring the coupons to the 
consumer's smart card. Furthermore, the applet software may provide 
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interactivity, for example, requiring that the consumer answer questions 
about the product or advertisement, to assure that the consumer is truly 
absorbing the advertising information. 

5 Figure 4 is a flow diagram illustrating one possible logic flow for 

interaction between advertisement viewing software and issuing software. 

In step 420, an advertisement viewing computer requests an electronic 
coupon from an issuing computer, in step 430, an issuing computer 
transmits advertisement applet software, an electronic advertisement, and 
10 an electronic coupon which is digitally signed to an advertisement viewing 
computer. In step 440, an advertisement viewing computer runs applet 
software. The applet software displays an electronic advertisement, in 
step 450, the applet software determines how to proceed based on whether 
or not a customer viewed an entire advertisement. In step 460, if a 
15 customer does not view an entire electronic advertisement, the 

advertisement applet software terminates the session and awaits another 
request, step 410. If, however, a customer views an entire electronic 
advertisement, in step 470, the applet software rewards the customer by 
transmitting an electronic coupon which is digitally signed to a 
20 customer's smart card. The smart card is typically inserted into a 
dispensing smart card reader/writer. Furthermore, the advertisement 
applet software may be interactive, requiring that a customer answer 
questions about a product or advertisement, to assure that a customer is 
truly absorbing the advertising information. Secure protocols, tamper- 
25 protected hardware, or record keeping databases typical in electronic 
money systems may be employed to prevent consumers and retailers from 
double spending or duplicating the electronic coupons. A suitable example 
for such secure protocols are described in detail in M. Bellare et al., 
"iKP - A Family of Secure Electronic Payment Protocols", July 12, 1995, 

30 available from ibm. 

Electronic coupons are not printed, therefore they cannot be printed 
over and over again, or photocopied. The number of electronic coupons a 
smart card may hold may be limited. 

35 

Figure 5 is an illustrative example showing a physical layout of a 
redemption system architecture embodying the present invention. An 
authenticated coupon redemption system as shown in Figure 5 comprises a 
redemption computer 510, a tamper-protected secure coprocessor 520, a 
40 redemption smart card reader/writer 530, a customer's smart card storing a 
digitally signed electronic coupon 150, and an issuing station. An 
issuing station is typically comprised of a computer 110 and is generally 
resident at a manufacturer or at a clearing house that performs the duties 
for a manufacturer or a group of manufacturers. A redemption smart card 
45 reader/writer 530 is typically attached to a redemption computer 510. A 
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tamper-protected secure coprocessor 520 is connected to a redemption 
computer 510 either directly or via a communications network. A 
redemption computer 510 may also be connected to an issuing computer 110, 
typically via phone line 570. 

Figures 6 and 7 are a flow diagram illustrating a possible logic 
flow in the redemption system during a typical point of sale. In step 
610, a consumer inserts the smart card 170 Figure 1 into a redemption 
smart card reader/writer 530 Figure 5. The smart card includes electronic 
coupons which have been digitally signed 150 Figure 1. In step 620, the 
smart card sends a list of all coupons stored in it to a redemption 
computer 510 Figure 5. In step 630, a redemption computer forwards the 
list of coupons and optionally a list of items purchased to a tamper - 
protected secure coprocessor 520 Figure 5. In step 64 0, the tamper- 
protected secure coprocessor 520 Figure 5 examines the list of all 
coupons, and assembles a list of those which have expired. in step 650, 
the tamper-protected secure coprocessor 520 Figure 5 requests a redemption 
computer to send a command to a smart card to delete expired coupons. 

Next, in step 660, the tamper-protected secure coprocessor searches for 
non-expired coupons that match actual items purchased. If there are no 
matching items, in step 670, the tamper-protected secure coprocessor tells 
the redemption computer that no items matched the coupon list. If there 
are matching items, in step 680, the tamper-protected secure coprocessor 
assembles a list of matching items and valid coupons. In step 690, the 
coprocessor requests the redemption computer to send a command to the 
smart card to extract valid matching coupons, in step 695, the smart card 
sends the valid matching coupons to the tamper-protected secure 
coprocessor. 


30 In order to protect a manufacturer from fraudulent merchants and 

customers, operations which assess the validity of coupons, operations 
which update, collect, store, or delete coupons take place inside a 
tamper-protected hardware boundary 655. The hardware boundary is part of 
typical tamper-protected secure coprocessors and smart cards. A typical 
35 tamper-protected secure coprocessor may be a tamper-protected computing 

device having a microprocessor and memory in a tamper-protected enclosure, 
such as the IBM 4758. 


Figure 8 is a flow diagram illustrating a possible logic flow during 
40 a typical daily coupon close-out. In step 710, a redemption computer 510 
Figure 5 connects to the issuing computer 110 Figure 5 or clearing house 
computer. Such connection would generally occur at the end of the day, or 
at some appropriate period of time. In step 720, the redemption computer 
510 Figure 5 sends electronic coupons which have been digitally signed 150 
Figure 5 to the issuing computer 110 Figure 5. In step 730, the issuing 


45 
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computer validates the electronic signatures on the coupons. in step 740, 
the clearing house reimburses the merchant for the valid coupons. 

Figure 9 is an illustrative example showing a physical layout of a 
5 software-based redemption system embodying the present invention. The 
embodiment shown in Figure 9 replaces the tamper-protected secure 
coprocessor 520 Figure 5 in the redemption computer 510 Figure 5 with a 
database of coupons 810 in the issuing computer 110 Figure 5. The 
database includes either a list of already spent coupons (so as to reject 
10 them if they are presented a second time) or a list of unspent coupons, 

from which it deletes coupons as they are presented for redemption. When 
a merchant connects to the issuing computer 110 to redeem the coupons, the 
issuing computer 110 searches the database 810 to determine if the coupons 
are valid. Only the valid coupons found in the database 810 may then be 
15 redeemed. 

while the invention has been particularly shown and described with 
respect to a preferred embodiment thereof, it will be understood by those 
skilled in the art that the foregoing and other changes in form and 
20 details may be made therein without departing from the scope of the 
invention. 
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Claims 

1. A coupon issuing system for electronically presenting advertisements 
and generating coupons, said system comprising: 

at least one issuing station for generating and transmitting 
electronic advertisements and electronic coupons according to 
predetermined criteria; 

at least one customer station to transmit from a user to the issuing 
station a request for an electronic coupon, for receiving electronic 
advertisements and electronic coupons from the issuing station, and for 
presenting the advertisement to the user for interaction with the user; 

at least one smart card for holding information including said 
electronic coupons; 


at least one smart card reader/writer for communicating information 
held in said at least one smart card to said at least one customer 
Station; and 

at least one software program to monitor a status of the interaction 
of the user with the advertisement; 

whereby when said at least one software program detects a predefined 
status, said at least one software program transfers said electronic 
coupons to said smart card via said smart card reader/writer. 

2. a system as claimed in claim 1, wherein said system further includes 
a user interface program for displaying information including request 
forms and the advertisements, whereby the advertisements are presented 
visually to the user via the customer station. 

3. A system as claimed in claim 2, wherein said user interface program 
comprises a Web browser running on the customer station. 

4. A system as claimed in claim 3, wherein said at least one software 
program includes a platform independent program downloadable dynamically 
from said issuing station, said at least one software program further 
controlling displays in conjunction with said Web browser. 

5. a system as claimed in claim 1, wherein said issuing station 
digitally signs said electronic coupons before downloading said electronic 
coupons to said customer station. 
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6. A system as claimed in claim 1, wherein said advertisements are 
updated over predefined intervals. 

7. A system for redeeming electronic coupons comprising: 
at least one redemption station; and 

at least one smart card reader/writer linked to said redemption 
station; 

whereby said redemption station selects and updates via said at 
least one smart card reader/writer, coupons stored in a smart card, 
deleting expired coupons and also those matching purchased items. 

8. A system as claimed in claim 7, wherein said system further includes 
at least one tamper-protected secure coprocessor, whereby operations which 
assess the validity of coupons including operations which update, collect, 
store, or delete coupons take place inside said tamper-protected secure 
coprocessor thereby preventing fraudulent tampering of said coupons. 

9. a system as claimed in claim 7, wherein said system further includes 
at least one issuing station linked to said redemption station, whereby 
coupons collected by said redemption, station are reimbursed by said at 
least one issuing station. 

10. A system as claimed in claim 9, wherein said at least one issuing 
station includes a database for storing lists of coupons, whereby 
validation of redeemed coupons are performed by matching said redeemed 
coupons with said lists of coupons. 

11. A method for advertising and issuing at least one coupon 
electronically, said method comprising: 

receiving a request for said electronic coupon from a consumer; 

generating at least one electronic advertisement and said electronic 
coupon; 

transmitting said electronic advertisement and said electronic 
coupon to a consumer's station for presentation to said consumer; 

monitoring said consumer's interaction with said advertisement; and 

transferring said electronic coupon to a smart card, if said 
consumer's interaction with said advertisement meet 3 a predefined status. 
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12. A method as claimed in claim 11, wherein said method further 
includes the step of retrieving an interest and demographic profile for 
said consumer before the step of generating. 

5 13. A method as claimed in claim 11, wherein said step of generating 

includes digitally signing said electronic coupon. 

14. A method as claimed in claim 11, wherein said method further 
includes the steps of: 

10 

reading a list of said electronic coupon stored in said smart card; 

deleting from said smart card said electronic coupon which have 
expired; 

15 

matching valid said electronic coupon with purchased items; and 

extracting valid matching said electronic coupon, 

20 whereby said consumer's electronic coupon is redeemed at a 

purchasing location when said consumer purchases items associated with 
said electronic coupon stored in said smart card. 

15. The method according to claim 14, wherein said method further 
25 includes the steps of; 

establishing a connection to an issuing station; 

sending said electronic coupon to said issuing station; 

30 

validating said electronic coupon; and 

reimbursing a merchant for valid said electronic coupon, 

35 whereby said issuing station periodically reimburses merchants 

collecting said electronic coupon. 


40 










WO 99/52051 


PCT/GB99/00575 


250 


2/9 









WO 99/52051 


PCT/GB99/00575 


->- Await o request from o customer 3^ 

___ 1 _ 

Obtain customer’s interest profile and demographics 
from customer,from customer’s smart card,or 
from a file on the viewing computer 


Insert customer’s interest profile and 
demographics into request for coupons 

-t_ _ 

Transmit request for coupon 
to issuing computer 


Display error 
message 


No 

response 


Await response-"" 
. from 

•issuing computer 


Response 
' received 


Receive advertisement applet 
software comprising an executable software, 
electronic advertisement and coupon 


Run advertisement 
applet software 


FIG. 3 


Customer did 

- \ -not view 

Terminate / 
request 


Determine^"~-^ 
if customer viewed 
entire 

^ advertisement 


Customer viewed 
entire advertisement 

Transmit electronic coupon to smart card 
vio dispensing smart card reader/writer 












Advertisement 
viewing computer 
requests a coupon 


WO 99/52051 


PCT/GB99/00575 


U9 
















WO 99/52051 


PCT/GB99/00575 


6/9 





FIG. 6 









WO 99/52051 


PCT/GB99/0O575 


7/9 









WO 99/52051 


PCT/GB99/00575 


8/9 


710 


720 


730 



740 














